Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7/3331e406-c85e-3ee6-8ad0-51f361655571.roa
File: 3331e406-c85e-3ee6-8ad0-51f361655571.roa (raw, json)
Hash identifier: yD8Lgq9ndjfBT8XgS160T1ti6Y5ACy0amdC+w0ZLKJE=
Subject key identifier: 00:D4:38:21:F7:BA:AA:8F:0F:E0:28:F6:5C:FB:28:ED:63:3A:6D:38
Certificate issuer: /CN=8a5c7d3b-8764-449f-9702-1c6dcb66b3b7
Certificate serial: 010D0C9F432858487C7AA36488AB298064628E00
Authority key identifier: 5C:52:52:7F:B6:E1:3E:EB:94:75:56:AB:3E:FC:9D:8A:40:16:0B:63
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7/3331e406-c85e-3ee6-8ad0-51f361655571.roa
Signing time: Thu 09 Jan 2025 10:14:13 +0000
ROA not before: Thu 09 Jan 2025 10:14:13 +0000
ROA not after: Wed 09 Apr 2025 09:14:13 +0000
asID: 203724
IP address blocks: 161.69.2.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:7c:7a:a3:64:88:ab:29:80:64:62:8e:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8a5c7d3b-8764-449f-9702-1c6dcb66b3b7
Validity
Not Before: Jan 9 10:14:13 2025 GMT
Not After : Apr 9 09:14:13 2025 GMT
Subject: CN=ccd02516-5154-4712-b9da-1a36a0db4181
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:e6:60:7a:54:1b:f2:35:b6:00:81:05:33:34:
42:41:ca:01:b8:2a:28:59:ae:a1:5d:40:78:86:93:
96:52:17:04:c2:38:b1:55:ce:f8:46:7a:0c:0a:51:
66:d3:59:f2:ce:dd:2c:e0:db:8c:ce:57:ab:35:c7:
55:09:ff:63:a0:ad:5f:ce:35:ad:ed:81:2f:48:84:
21:d9:16:88:5c:3b:d7:21:e7:79:6c:79:ca:11:d0:
c6:b2:c0:46:19:c9:50:86:41:3b:c4:5c:88:6e:66:
2d:24:cc:20:b2:d7:2d:90:25:3f:ae:86:00:93:99:
57:72:9a:8b:aa:8f:27:2a:cc:a3:e6:27:7e:0f:b4:
c8:9f:81:1c:0f:89:36:bc:7e:8a:ad:50:61:02:c3:
36:9b:7a:c8:56:35:63:18:dd:98:94:74:68:18:f3:
3f:49:ab:2f:7a:b1:f7:b4:63:4a:61:66:82:f9:7b:
00:7d:79:c7:71:3e:b5:b5:d2:e1:c0:34:8b:fe:29:
e0:58:e7:d8:1e:b3:3f:2e:72:85:4e:44:01:ac:4f:
ae:ee:82:78:72:2d:2c:93:70:8b:34:92:31:0a:5b:
86:f1:29:79:bd:7c:97:e4:3e:d2:09:18:8b:ff:0a:
1a:39:ce:7c:6c:5e:96:13:d4:53:b1:0c:d9:be:f1:
5a:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:D4:38:21:F7:BA:AA:8F:0F:E0:28:F6:5C:FB:28:ED:63:3A:6D:38
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7/3331e406-c85e-3ee6-8ad0-51f361655571.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7.crl
X509v3 Authority Key Identifier:
keyid:5C:52:52:7F:B6:E1:3E:EB:94:75:56:AB:3E:FC:9D:8A:40:16:0B:63
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7.cer
sbgp-ipAddrBlock: critical
IPv4:
161.69.2.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
51:6d:e8:50:89:d8:50:bf:6c:a3:fe:0d:69:c9:79:d9:9a:0f:
09:c1:3c:fa:d1:c9:8c:e0:b9:76:b7:ff:bf:c5:87:c5:30:a8:
60:ba:3b:f4:94:e0:4c:7b:2c:78:f6:50:79:d6:26:10:44:88:
56:ef:f2:be:03:9b:14:99:67:4f:29:37:ca:fc:1c:ea:38:47:
b1:11:56:e4:e2:13:35:78:6b:ff:6a:4e:06:09:40:33:4b:e9:
b3:f4:94:42:3b:27:66:7f:3f:59:54:d8:11:d8:92:4e:b9:c1:
bf:f3:9b:11:2b:78:1c:0b:b6:3d:21:76:ef:a5:84:4a:68:29:
61:31:ea:27:43:b6:bd:ce:e6:c8:22:b5:53:00:0f:31:66:34:
c8:4b:87:20:a2:f9:de:62:6f:40:f0:f3:5c:c1:e8:45:c3:d7:
5d:ad:ab:04:a3:f1:fe:64:1d:b1:6c:ef:ae:e0:55:c1:3b:23:
be:d6:0a:9c:7a:d0:5f:19:0f:86:c1:9d:ef:a2:71:bd:d4:e8:
bf:fd:0b:c7:af:7a:37:07:58:f3:46:bc:84:06:d6:d9:39:ae:
39:99:10:96:f4:c8:47:3f:79:93:70:a7:82:58:29:9a:12:fc:
d4:43:46:51:16:a7:2d:2e:1a:8c:23:85:0b:d7:bd:b3:89:25:
80:71:e0:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 16:04:06 2025 by rpki-client